Skip to content
OpenAdvisories

Archive

13 August 2019

Vulnerabilities first published on this day (UTC), newest first.

← July 2019 2019 / August /13 September 2019 →
  1. 1162
  2. 2182
  3. 32
  4. 4 
  5. 560
  6. 664
  7. 776
  8. 859
  9. 954
  10. 104
  11. 113
  12. 1247
  13. 1368
  14. 14176
  15. 1556
  16. 1645
  17. 175
  18. 1817
  19. 1942
  20. 20197
  21. 21115
  22. 22111
  23. 2377
  24. 24 
  25. 252
  26. 26121
  27. 2762
  28. 2870
  29. 2997
  30. 3033
  31. 31 
All Critical High Medium Low Exploited only Public exploit

68 results · Feed

  • Unscored —
    CVE-2017-18492 Scanner template

    The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2018-20963

    The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.

  • Unscored —
    CVE-2018-20964

    The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.

  • Unscored —
    CVE-2017-18493 Scanner template

    The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18494 Scanner template

    The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2015-9296

    The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.

  • Unscored —
    CVE-2015-9297

    The events-manager plugin before 5.6 for WordPress has XSS.

  • Unscored —
    CVE-2015-9298

    The events-manager plugin before 5.6 for WordPress has code injection.

  • Unscored —
    CVE-2015-9299

    The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.

  • Unscored —
    CVE-2015-9300

    The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2016-10870

    The google-language-translator plugin before 5.0.06 for WordPress has XSS.

  • Unscored —
    CVE-2017-18495

    The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.

  • Unscored —
    CVE-2017-18496 Scanner template

    The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2012-6713

    The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.

  • Unscored —
    CVE-2017-18497

    The liveforms plugin before 3.4.0 for WordPress has XSS.

  • Unscored —
    CVE-2015-9301

    The liveforms plugin before 3.2.0 for WordPress has SQL injection.

  • Unscored —
    CVE-2016-10871

    The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page.

  • Unscored —
    CVE-2015-9302

    The simple-fields plugin before 1.4.11 for WordPress has XSS.

  • Unscored —
    CVE-2017-18498

    The simple-job-board plugin before 2.4.4 for WordPress has reflected XSS via keyword search.

  • Unscored —
    CVE-2017-18507

    The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.

  • Unscored —
    CVE-2019-8448

    The login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2 allows remote attacke…

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2019-13419

    Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.

    floragunn Search Guard
  • Unscored —
    CVE-2019-13420

    Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.

    floragunn Search Guard
  • Unscored —
    CVE-2019-14516

    The mAadhaar application 1.2.7 for Android lacks SSL Certificate Validation, leading to man-in-the-middle attacks again…

  • Unscored —
    CVE-2019-14530 Public exploit Scanner template EPSS 66%

    An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can…

  • Unscored —
    CVE-2017-18509

    An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an at…

    linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu
  • Unscored —
    CVE-2019-14987

    Adive Framework through 2.0.7 is affected by XSS in the Create New Table and Create New Navigation Link functions.

  • High 7.5
    CVE-2019-9514 EPSS 83%

    Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service

    Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depe…

    nodejs go golang-1.8 golang-1.10 Debian Ubuntu Azure Linux Alpine